Claude
7928f6f769
Firewall inter-VLAN policy matrix: - Visual VLAN-to-VLAN matrix with click-to-set policies - Policy types: block, allow, one-way, printer, service-ports - Printer template: other VLANs reach ports 9100/631/443/515, printers cannot initiate back — solves the "printer VLAN" use case - Generates both switch ACLs AND OPNsense firewall rules - Preview commands before pushing, auto-backup before changes Service proxy (LAN services via FQDN without inter-VLAN access): - Register services with FQDN + backend URL + allowed VLANs - Deploy generates Caddyfile entries, Unbound DNS overrides, and firewall rules allowing only port 443 to the proxy - Pattern: device on VLAN 30 → DNS resolves to mgmt box → Caddy proxies to actual LAN server — no VLAN-to-VLAN access needed ntfy push notifications: - Configure ntfy.sh or self-hosted ntfy server - Alert events: connectivity lost/restored, PoE budget >85%, backup failures, push failures - Integrated into poll loop — alerts fire on state transitions - Test notification button Scheduled operations: - Cron-like scheduler for automated backups and connectivity checks - Background thread checks every 60 seconds - Per-schedule: name, action, hour, minute, days (mon,wed,fri or *) - Run-now button for manual trigger - ntfy notifications on scheduled task completion/failure https://claude.ai/code/session_01Do9bsN39MTuy2GVv7yzSrE
15 lines
391 B
Caddyfile
15 lines
391 B
Caddyfile
# Generated by Avaya_5952_setup.py
|
|
# {fqdn} is replaced with your chosen hostname
|
|
{fqdn} {{
|
|
reverse_proxy switch-manager:8765
|
|
tls internal
|
|
}}
|
|
|
|
:80 {{
|
|
redir https://{{host}}{{uri}} permanent
|
|
}}
|
|
|
|
# Service proxies — auto-generated by switch-manager
|
|
# To include service proxy entries, add this line (uncommented) after deployment:
|
|
# import /etc/switch-manager/Caddyfile.services
|